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1 . (Currently Amended) A method of authenticating an electronic device, the 
electronic device having device specific identifying data stored therein, the method 
comprising: 

issuing a plurality of random challenges to the electronic device and 
receiving a plurality of responses from the electronic device, wherein each 
random challenge and corresponding response represents a challenge response 
pair which is unique and based upon specific identifying data of the electronic 
device: 

obtaining a previously determine d one of the challenge response pai^ pairs 
associated with the electronic device , th e chall e ng e r e spons e pair b e ing uniqu e 
and bas e d upon th e d e vic e sp e cific id e ntifying data of th e el e ctronic d e vic e; 

communicating a challenge portion of the challenge response pair to the 
electronic device; 

receiving from the electronic device a response to the challenge portion^ 
wherein t he response being based upon the device specific identifying 
information; a«d 

comparing the response to a response portion of the challenge response 
pai r to authonticato tho use r ; and 

authenticating the user if the response matches . 

2. (Currently Amended) The method of claim 1 , wherein the step of obtaining arone 
of the challenge response paif -pairs comprises obtaining from a database store of 
challenge response pairs the challenge response pair. 
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3. Cancelled. 

4. (Original) The method of claim 1, wherein the step of obtaining a challenge 
response pair comprises obtaining a challenge response pair from a challenge response 
pair broker. 

5. (Original) The method of claim 1, wherein the device specific identifying data 
comprises data stored on a subscriber identity module (SIM) card associated with the 
electronic device, or computed by the SIM card upon demand. 

6. (Original) The method of claim 1, comprising the step of discarding the challenge 
response pair after use. 

7. (Original) The method of claim 1, wherein the step of obtaining a challenge 
response pair comprises obtaining via a secure communication interface the challenge 
response pair. 

8. (Currently Amended) A system for device authentication comprising: 

an agent for interrogating an electronic device to obtain at least one challenge 
response pai r through issuance of a plurality of random challenges to the electronic 
device and receiving a plurality of responses from the electronic device, wherein each 
random challenge and corresponding response represents a challenge response pair which 
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is unique and , the challenge response pair being b ased upon device specific identifying 
data retained within the electronic device; 

a memory for storing the challenge response pair; and 

an agent for providing the challenge response pair from the memory to a user 
which of the challenge response pair for authenticatin g authenticates an electronic device 
by communicating a challenge portion of the challenge response pair to the electronic 
device, receiving from the electronic device a response to the challenge portion, wherein 
the response being based upon the device specific identifying information, comparing the 
response to a response portion of the challenge response pair; and authenticating the user 
if the response matches. 

9. (Original) The system of claim 8, wherein the device specific identifying data 
comprises subscribed identity module (SIM) card data from a SIM card within the 
electronic device. 

10. (Original) The system of claim 9, wherein the user comprises a service provider 
having a need to authenticate the electronic device. 

1 1 . (Original) The system of claim 10, wherein the agent for interrogating and the 
agent for providing are associated with the service provider. 

12. Cancelled. 
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1 3 . (Original) The system of claim 8, wherein the agent for providing the challenge 
response pair comprises a challenge response pair broker. 

14. (Currently Amended) A method of providing an authentication service 
comprising the steps of 

obtaining from an elecfronic device a plurality of challenge response pairs 
through issuance of a plurality of random challenges to the elecfronic device and 
receiving a plurality of responses from the elecfronic device, wherein each random 
challenge and corresponding response represents a challenge response pair which is 
unique and the challenge response pairs having a challenge portion and a respons e 
portion, th e r e spons e portion being based upon the challenge and device specific 
identifying data associated with the elecfronic device; 

storing the challenge response pairs; and 

providing responsive to a request for an authentication service a challenge 
response pair to a service provider for authenticating the electronic device by 
communicating a challenge portion of the challenge response pair to the elecfronic 
device, receiving from the elecfronic device a response to the challenge portion, wherein 
the response being based upon the device specific identifying information, comparing the 
response from the electronic device to a response portion of the challenge response pair: 
and authenticating the user if the response matches. . 

15. (Original) The method of claim 14, wherein the step of obtaining from an 
electronic device a plurality of challenge response pairs comprises generating from a 
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subscribed identify module (SIM) card a plurality of challenge response pairs and 
providing the SIM card to a user of the electronic device. 

16. (Original) The method of claim 14, wherein the step of providing response to a 
request for an authentication service a challenge response pair comprises vending the 
challenge response pair. 

17. (Original) The method of claim 14, wherein the step of providing response to a 
request for an authentication service a challenge response pair comprises securely 
communicating the challenge response pair to the service provider. 



Page 6 of 8 



